$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft File: VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft (raw, json) Hash identifier: YRWeESobwOFOKPa6WEp5Dihy4W8K04Ekl2OVFiDAwVM= Subject key identifier: 9E:7F:F1:01:C1:33:38:30:1B:5E:6E:D3:7A:5E:24:11:54:46:A8:50 Authority key identifier: 56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC Certificate issuer: /CN=A91203DF/serialNumber=56790B8C9507D9D4F3900950D329E275747767AC Certificate serial: 0D28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft Manifest number: 0D1A Signing time: Fri 22 Nov 2024 17:59:16 +0000 Manifest this update: Fri 22 Nov 2024 17:59:16 +0000 Manifest next update: Fri 29 Nov 2024 17:59:16 +0000 Files and hashes: 1: VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl (hash: owsLNhHAtfsgLuKOYPMSBKfkb5C9fOSELGm0Qikhtag=) 2: 8DD1E6B6E6FE11EE90BD3C1FC4F9AE02.roa (hash: za6m9jPb2lRjTKciCv9TcPmUsYTW1W+Cy6gPB6EGd5M=) 3: 8EB36E60E6FE11EE90BD3C1FC4F9AE02.roa (hash: tBe8qmvHuHH6DXNS3CNAhI+GmhXFgG8JrevEcsqZkfM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:59:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3368 (0xd28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203DF/serialNumber=56790B8C9507D9D4F3900950D329E275747767AC Validity Not Before: Nov 22 17:59:16 2024 GMT Not After : Nov 29 17:59:16 2024 GMT Subject: CN=6740c674-12d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:51:84:db:9d:3b:e1:09:2e:06:2b:03:de:a0: da:61:73:cf:a6:14:02:9c:53:c1:db:63:b3:78:2a: 77:93:d8:d2:c7:f0:d4:43:5e:a3:88:f8:2f:30:f8: c9:0a:6d:12:33:b3:2c:d8:70:26:20:cd:d4:54:e3: 69:12:b4:7a:85:2b:be:7b:5f:dd:5b:78:f7:01:4f: cd:9c:a3:f5:0e:f2:1b:da:1a:4d:32:d5:0c:0a:55: 56:36:f3:6f:e4:10:df:1b:80:18:1c:74:b0:20:43: 98:b1:86:3f:31:3d:53:c2:0f:56:81:90:db:43:93: 6e:72:5c:4b:ee:43:40:90:01:f0:13:4e:33:61:fe: ef:9e:b0:c3:dc:2c:fe:01:be:07:b5:f4:e8:4f:0e: 17:2a:63:a3:5d:cc:1f:ab:39:03:d7:e7:6a:49:ad: 74:b6:ed:fe:31:e5:3e:28:c4:64:55:60:5f:f5:b0: eb:cf:0d:3e:4b:e6:ff:7b:fd:66:a1:53:37:32:62: 02:9b:67:06:87:40:d2:8c:d6:75:26:cb:35:0c:b2: 34:1b:e1:35:ad:f4:74:6a:a5:a6:56:52:d8:36:7a: a3:1b:1c:f8:32:21:3d:b3:8f:ad:f5:8a:55:aa:96: 9b:db:d9:00:17:6e:73:a4:3d:13:9b:b7:db:5c:80: b2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7F:F1:01:C1:33:38:30:1B:5E:6E:D3:7A:5E:24:11:54:46:A8:50 X509v3 Authority Key Identifier: keyid:56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:58:19:e8:36:32:b9:20:ee:7f:2e:d5:8a:28:95:68:b9:bf: 59:05:77:91:28:02:a7:0c:2c:e7:21:29:c2:e8:85:8d:ed:56: 8b:5d:f6:81:3b:bf:27:2a:8c:e7:a3:ca:b8:b2:e2:85:2e:0b: b1:c3:80:28:f1:ba:d3:44:26:63:41:9b:c0:93:c0:69:78:3c: b7:1a:0b:f2:94:5f:50:a2:17:6e:37:66:c7:d9:77:4d:79:ca: c8:2b:ff:2d:c8:a0:9f:0d:25:cd:cf:9a:72:86:f3:77:87:68: 53:d0:1a:69:b0:9b:9c:36:68:73:3e:9d:08:ae:b0:71:a1:3f: 75:21:40:08:d5:07:94:5f:b1:07:3d:98:b1:eb:48:80:6a:b0: ca:de:66:0e:cd:2f:b8:f6:a0:19:83:37:fb:c5:10:33:f6:67: 99:5f:b8:36:c9:8a:26:f8:0a:0f:c1:4b:04:d2:98:70:f0:92: 06:80:22:db:b9:c5:3a:ce:eb:a4:c5:03:60:05:32:bb:ca:1c: 26:a3:5e:13:9b:4e:5d:5b:31:f4:8c:b0:8c:bf:d0:25:8f:e4: b2:d6:f8:34:a4:7d:4a:91:dd:c5:fd:36:8c:e2:4e:f4:6c:d3: 4d:70:af:b0:24:31:fa:f0:b9:bc:f3:c0:63:87:3d:c8:24:89: 73:c6:cb:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzREYxMTAvBgNVBAUTKDU2NzkwQjhDOTUwN0Q5RDRGMzkwMDk1MEQzMjlFMjc1 NzQ3NzY3QUMwHhcNMjQxMTIyMTc1OTE2WhcNMjQxMTI5MTc1OTE2WjAYMRYwFAYD VQQDEw02NzQwYzY3NC0xMmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqlGE25074QkuBisD3qDaYXPPphQCnFPB22OzeCp3k9jSx/DUQ16jiPgvMPjJ Cm0SM7Ms2HAmIM3UVONpErR6hSu+e1/dW3j3AU/NnKP1DvIb2hpNMtUMClVWNvNv 5BDfG4AYHHSwIEOYsYY/MT1Twg9WgZDbQ5NuclxL7kNAkAHwE04zYf7vnrDD3Cz+ Ab4HtfToTw4XKmOjXcwfqzkD1+dqSa10tu3+MeU+KMRkVWBf9bDrzw0+S+b/e/1m oVM3MmICm2cGh0DSjNZ1Jss1DLI0G+E1rfR0aqWmVlLYNnqjGxz4MiE9s4+t9YpV qpab29kAF25zpD0Tm7fbXICy1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ5/8QHB MzgwG15u03peJBFURqhQMB8GA1UdIwQYMBaAFFZ5C4yVB9nU85AJUNMp4nV0d2es MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNERi85MjczOTdCNENB MzQxMUU5OTY4MzdFNTZDNEY5QUUwMi9WbmtMakpVSDJkVHprQWxRMHluaWRYUjNa NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Zua0xqSlVIMmRUemtBbFEweW5pZFhSM1o2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDNERi85MjczOTdCNENBMzQxMUU5OTY4MzdFNTZDNEY5QUUwMi9WbmtMakpVSDJk VHprQWxRMHluaWRYUjNaNncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXWBnoNjK5IO5/LtWKKJVoub9ZBXeRKAKnDCznISnC6IWN7VaLXfaB O78nKozno8q4suKFLguxw4Ao8brTRCZjQZvAk8BpeDy3GgvylF9QohduN2bH2XdN ecrIK/8tyKCfDSXNz5pyhvN3h2hT0BppsJucNmhzPp0IrrBxoT91IUAI1QeUX7EH PZix60iAarDK3mYOzS+49qAZgzf7xRAz9meZX7g2yYom+AoPwUsE0phw8JIGgCLb ucU6zuukxQNgBTK7yhwmo14Tm05dWzH0jLCMv9Alj+Sy1vg0pH1Kkd3F/TaM4k70 bNNNcK+wJDH68Lm888Bjhz3IJIlzxssd -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:56 2024 by rpki-client on console-fra.rpki-client.org